Skip to the page
Year 10 · ICT · Autumn 2 · Networks; layout and styles

Security on a network

What this lesson covers

4.2 Network issues and communication

Cambridge IGCSE ICT 0417 · Topic 4: Networks and the effects of using them · Paper 1

You will learn to

  • Explain why data sent over a network must be kept secure.
  • Compare strong and weak passwords.
  • Describe authentication methods: passwords, biometrics, cards, physical and electronic tokens, and zero login.
  • Explain how anti-malware software protects a network.

Success criteria

  • I can rank three passwords from weakest to strongest and say why.
  • I can give one advantage and one disadvantage of biometrics.
  • I can explain how an electronic token adds a second check to a password.
The syllabus points for this section
  • Explain why data transfer on networks must be kept secure.
  • Compare strong and weak passwords.
  • Describe authentication methods: passwords, biometrics, magnetic stripe cards, smart cards, physical tokens, electronic tokens and zero login.
  • Explain how anti-malware protects a network.
  • Describe video, audio and web conferencing with advantages and disadvantages.

Key words

Say each word, then read what it means. Every one is in the glossary too.

Network
Two or more devices connected so they can share data and resources.
NIC
Network interface card: hardware that connects a device to a network.
IP address
An address that identifies a device on a network or the internet.
LAN
Local area network: covers one building or site.
Authentication
Proving a user is who they say they are.
Biometrics
Using unique body features such as fingerprints for authentication.
One-time password
A code that works only once, made by a token.
Zero login
Authentication without typing, using biometrics and behaviour.
Anti-malware
Software that detects, quarantines and removes malicious software.

The explanation

Read it here, or open the study page below to go one step at a time with things to try.

Security of data transfer

Data on a network can be intercepted, changed or stolen. Networks also spread malware quickly.

Authentication means proving that a user is who they say they are, before they get access.

Common protections: user IDs and passwords, firewalls, encryption of data being sent, and anti-malware software.

Strong and weak passwords

A weak password is short or easy to guess: a name, a birthday, a word from the dictionary, `123456` or `password`.

A strong password is long and mixes upper-case letters, lower-case letters, numbers and symbols. It is not a real word and is not linked to the user.

Each extra character multiplies the number of possible passwords. So length matters most. Type passwords into the checker and watch the time to crack change.

e.g.Example
Assume an attacker's computer tries 10 billion guesses a second. 8 lower-case letters: 26^8 = about 209 billion options. Cracked in about 21 seconds. 8 characters from all 95 keyboard characters (including the space): 95^8 = about 6.6 × 10^15. About 8 days. 12 characters from all 95: 95^12 = about 5.4 × 10^23. About 1.7 million years.
!Watch out

A strong password is still unsafe if it is reused on many sites, written on a sticky note, or never changed after a data breach.

There is something to try for this step in the IGCSE library.

Passwords and biometrics

Passwords are the most common method. They are cheap and easy, but can be guessed, forgotten, seen by shoulder surfing or stolen by spyware.

Biometrics use a unique part of a person's body or behaviour: fingerprint, face, iris or retina, voice or handwriting.

BiometricAdvantageDisadvantage
FingerprintQuick and cheap; unique to each personDirty or cut fingers may not be recognised
Face recognitionNo contact neededLighting, glasses, beards or ageing can cause errors
Iris / retina scanVery accurate and very hard to fakeExpensive; retina scanning is intrusive
Voice recognitionWorks over the phone; no extra hardware on a phoneColds and background noise cause errors; can be recorded and replayed
?Why?

Biometrics are more secure than passwords because a body feature cannot be forgotten, shared or easily guessed.

Cards and tokens

A magnetic stripe card holds data such as a staff ID on its stripe. It is swiped to open doors. Cheap, but easy to copy and damaged by magnets.

A smart card has a chip that stores and processes data, often with an RFID antenna. It is harder to copy and can hold more data. Often used with a PIN.

A physical token is a small device that shows a one-time password (OTP). Some need the user's PIN first. Banks use them for online banking.

An electronic token is software, usually an app on a phone, that creates a one-time code or approves a log-in. Codes change every 30 to 60 seconds, so a stolen code is soon useless.

e.g.Example
Logging in to online banking: 1. Type user ID and password (something you know). 2. Open the bank's app, which shows a 6-digit code that changes every 30 seconds (something you have). 3. Type the code. Two different factors make it much harder for a hacker.
!Watch out

A token's code is a one-time password. Say why it helps: even if it is intercepted, it cannot be used again.

Zero login

Zero login is a way of authenticating without typing anything. The system recognises the user from biometrics and behaviour, such as how they hold the phone, how they type and where they usually are.

Advantage: very convenient, and nothing to forget.

Disadvantage: the system collects lots of personal data, users may not know they are being tracked, and it is harder to tell how secure it is.

Anti-malware

Malware is software designed to harm a computer or steal data, such as viruses, spyware and ransomware.

Anti-malware software (including anti-virus) scans files and emails, compares them with a database of known malware signatures, and watches for suspicious behaviour.

Infected files are quarantined (isolated so they cannot run) or deleted. The software must be updated regularly so it knows about new malware.

?Why?

On a network, one infected computer can infect all the others, so every device needs up-to-date anti-malware.

Electronic conferencing

Video conferencing uses webcams, microphones, speakers and screens so people in different places can see and hear each other live.

Audio conferencing uses only sound: a phone call with three or more people, or an internet call with no video. Participants often dial a number and type a PIN.

Web conferencing (webinars) runs in a browser or app. As well as video and audio, users can share screens, chat by text, use a whiteboard and vote.

Advantages (all types)Disadvantages (all types)
No travel, so saves time, money and fuelNeeds a reliable, fast internet connection; lag and dropped calls
Meetings can be set up at short noticeTime zones make scheduling hard for international meetings
People can join from anywhere, including when ill or abroadLess personal: body language is harder to read
Safer: no travel risksEquipment costs (webcams, headsets, software licences); security risk if calls are hacked
e.g.Example
Audio conferencing is cheaper and needs less bandwidth than video, but people cannot see slides or faces. Web conferencing lets a teacher share a presentation and run a poll, which audio-only cannot do.

Study it

Open the study page and go one step at a time.

Check yourself

One question at a time. The reason shows after each answer.

Saved on this device.